$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer File: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer (raw, json) Hash identifier: DSqsdQUvl9eFWmUXHk20kMoKqqjV+56UejT9aDg/hiI= Subject key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3BBF57530DCE6F02FAF9452CAD6DEAED3F39125C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 19:52:31 +0000 Certificate not after: Fri 03 Jul 2026 19:57:31 +0000 Subordinate resources: IP: 2a06:9f81:3000::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:bf:57:53:0d:ce:6f:02:fa:f9:45:2c:ad:6d:ea:ed:3f:39:12:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 19:52:31 2025 GMT Not After : Jul 3 19:57:31 2026 GMT Subject: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:bd:de:3b:d7:37:db:6b:80:9f:3d:5e:ac: 4e:31:78:1c:fd:4c:af:8e:be:f6:e1:eb:98:c1:95: ce:cb:0a:2e:d2:ef:57:f3:85:f2:9a:68:14:cc:f4: a2:29:b1:c7:65:1c:69:85:a8:e8:9c:95:a7:aa:ff: 49:f0:21:91:87:d6:db:94:23:81:54:38:e5:48:b1: 0f:84:8d:68:78:d8:76:c6:85:9b:b5:44:2e:a6:5b: 41:db:91:d7:40:f3:26:8c:82:2b:21:db:da:4c:be: 4e:e0:ca:c3:a0:03:c5:b3:eb:71:1e:e4:01:ee:56: 50:e6:1f:bb:a2:42:4d:11:65:95:66:94:5d:bc:3d: 3e:0d:0d:00:01:48:23:d3:b4:d6:da:76:cd:a8:3f: a8:6f:7c:61:6b:88:27:64:9a:a5:4c:f9:d5:dd:eb: 7a:91:d6:39:09:ac:b3:3a:14:ee:31:c6:be:1f:dd: 5e:b0:59:6d:28:96:72:13:cc:d7:81:28:4b:6d:9b: c8:94:38:bb:ce:06:4c:be:46:46:ad:fe:a2:45:63: af:de:25:40:0f:1a:3f:c9:12:ab:de:de:4f:6d:3a: 57:cf:63:7b:de:97:61:d6:15:00:08:86:8d:3d:52: 1e:ed:96:36:79:7b:08:a2:6e:0f:6d:cc:ae:58:d7: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:03:46:14:8b:67:43:ec:cf:d8:09:00:e3:84:6d:73:e2:e9: 1b:da:5b:d9:48:45:b1:06:06:64:bc:c4:94:05:c3:55:b9:b4: dd:b6:f4:9e:98:db:c7:66:f8:72:94:d0:70:85:c9:2d:19:70: 83:17:e6:91:e9:22:55:c9:af:3e:34:9d:27:45:9c:29:1a:a9: 98:b0:d0:d6:aa:29:63:d4:08:19:32:8e:d1:95:33:32:ec:e7: d0:95:68:38:8f:5d:3f:a0:71:8b:54:80:f2:bf:54:87:b4:bd: 18:26:6a:99:44:7b:2e:9e:ff:4b:15:06:b4:53:78:09:d1:b7: aa:8f:39:1a:32:81:56:ab:b4:92:a9:2c:a7:86:a3:40:f2:ca: 20:cb:cc:98:76:37:f8:8d:29:c2:97:32:5b:28:e0:b4:15:14: d3:1b:8f:29:77:79:77:83:bd:c4:2c:bc:2b:23:92:00:a9:42: d8:f7:ee:b1:d9:0e:2c:bf:8d:b2:20:d7:ad:fa:1b:a8:22:9b: 42:d0:e8:90:35:0d:ed:e7:20:d0:bd:49:67:91:75:38:36:10: be:8f:88:4c:c3:92:95:1b:28:c1:6d:9a:2e:c4:d8:98:6e:c8: 73:0d:4c:3a:29:79:bb:e2:2a:de:fa:28:e9:49:14:c5:5d:45: 52:28:87:f8 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUO79XUw3ObwL6+UUsrW3q7T85ElwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQxOTUyMzFaFw0yNjA3MDMxOTU3MzFaMDMxMTAvBgNV BAMTKDcyRDFEREUxQjFCMDQ1RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAb3eO9c322uAnz1erE4xeBz9 TK+Ovvbh65jBlc7LCi7S71fzhfKaaBTM9KIpscdlHGmFqOiclaeq/0nwIZGH1tuU I4FUOOVIsQ+EjWh42HbGhZu1RC6mW0HbkddA8yaMgish29pMvk7gysOgA8Wz63Ee 5AHuVlDmH7uiQk0RZZVmlF28PT4NDQABSCPTtNbads2oP6hvfGFriCdkmqVM+dXd 63qR1jkJrLM6FO4xxr4f3V6wWW0olnITzNeBKEttm8iUOLvOBky+Rkat/qJFY6/e JUAPGj/JEqve3k9tOlfPY3vel2HWFQAIho09Uh7tljZ5ewiibg9tzK5Y17AdAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRy0d3hsbBF2L5D nd0QFIbmcXyTzDAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhm MTg4N2YyLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kNjRhYzk0MS01YTdjLTQyY2YtYjY0Yi0wYjI4 OGYxODg3ZjIvMS83MkQxRERFMUIxQjA0NUQ4QkU0MzlEREQxMDE0ODZFNjcxN0M5 M0NDLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BMDANBgkqhkiG9w0BAQsF AAOCAQEACwNGFItnQ+zP2AkA44Rtc+LpG9pb2UhFsQYGZLzElAXDVbm03bb0npjb x2b4cpTQcIXJLRlwgxfmkekiVcmvPjSdJ0WcKRqpmLDQ1qopY9QIGTKO0ZUzMuzn 0JVoOI9dP6Bxi1SA8r9Uh7S9GCZqmUR7Lp7/SxUGtFN4CdG3qo85GjKBVqu0kqks p4ajQPLKIMvMmHY3+I0pwpcyWyjgtBUU0xuPKXd5d4O9xCy8KyOSAKlC2PfusdkO LL+NsiDXrfobqCKbQtDokDUN7ecg0L1JZ5F1ODYQvo+ITMOSlRsowW2aLsTYmG7I cw1MOil5u+Iq3voo6UkUxV1FUiiH+A== -----END CERTIFICATE-----Generated at Sat Jul 5 04:38:39 2025 by rpki-client